- syslog-ng - lists.balabit.hu

segfault on solaris 2.7
by Jon Drukman 24 Sep '01

24 Sep '01

just grabbed 1.4.12 from the site and built from source. solaris 2.7, all recommended sun patches installed. here's what happens: lwp_create(0xFFBEF598, LWP_DETACHED|LWP_SUSPENDED, 0xFF105DFC) = 3 lwp_continue(3) = 0 lwp_create() (returning as new lwp ...) = 0 lwp_schedctl(SC_STATE|SC_BLOCK, -1, 0xFF105CFC) = 0 lwp_schedctl(SC_DOOR, 0, 0x00000000) = 4 door_bind(4) = 0 close(4) = 0 close(3) = 0 sigaction(SIGWAITING, 0xFF13D7F8, 0x00000000) = 0 lwp_self() = 1 Incurred fault #6, FLTBOUNDS %pc = 0x81C7E008 siginfo: SIGSEGV SEGV_MAPERR addr=0x81C7E008 Received signal #11, SIGSEGV [caught] siginfo: SIGSEGV SEGV_MAPERR addr=0x81C7E008 sysconfig(_CONFIG_SIGRT_MIN) = 38 sigprocmask(SIG_SETMASK, 0xFF13D9A8, 0x00000000) = 0 sigaction(SIGSEGV, 0xFFBEF6D0, 0x00000000) = 0 sigprocmask(SIG_SETMASK, 0xFF1496D8, 0x00000000) = 0 sysconfig(_CONFIG_SIGRT_MIN) = 38 setcontext(0xFFBEF888) Incurred fault #6, FLTBOUNDS %pc = 0x81C7E008 siginfo: SIGSEGV SEGV_MAPERR addr=0x81C7E008 Received signal #11, SIGSEGV [default] siginfo: SIGSEGV SEGV_MAPERR addr=0x81C7E008 *** process killed *** # sotruss /usr/local/sbin/syslog-ng -d syslog-ng -> libc.so.1:*atexit(0xff3babf8, 0x0, 0x0) syslog-ng -> libc.so.1:*atexit(0x1f364, 0xff3babf8, 0xff0b8048) syslog-ng -> libc.so.1:*malloc(0x3c, 0x71239160, 0x0) syslog-ng -> libc_psr.so.1:*memset(0x35a30, 0x0, 0x30) syslog-ng -> libc_psr.so.1:*memcpy(0xffbefb30, 0x334d4, 0x70) syslog-ng -> libc.so.1:*getenv(0x22538, 0x34800, 0x1) syslog-ng -> libc.so.1:*strcmp(0xffbefd2e, 0x226f8, 0x2) /usr/bin/sotruss[86]: 29449 Segmentation Fault(coredump)

1 0

wrong number of arguments calling init_file in libol
by William D. Colburn (aka Schlake) 24 Sep '01

24 Sep '01

In libol init_file() takes an additional "struct ol_string *fname" that isn't in the syslog-ng afstreams.c call. wcolburn@rainbow<~/compile/sun4>$ grep -C -n init_file syslog-ng-1.4.12/src/afstreams.c libol-0.2.24/src/io.c syslog-ng-1.4.12/src/afstreams.c-165- NEW(stream_fd, f); syslog-ng-1.4.12/src/afstreams.c-166- syslog-ng-1.4.12/src/afstreams.c:167: init_file(backend, &f->super, fd); syslog-ng-1.4.12/src/afstreams.c-168- f->super.prepare = prepare_stream_fd; syslog-ng-1.4.12/src/afstreams.c-169- f->super.read = stream_read_callback; -- libol-0.2.24/src/io.c-629- libol-0.2.24/src/io.c-630-/* Initializes a file structure, and adds it to the backend's list. */ libol-0.2.24/src/io.c:631:void init_file(struct io_backend *b, struct nonblocking_fd *f, int fd, libol-0.2.24/src/io.c-632- struct ol_string *fname) libol-0.2.24/src/io.c-633-{ -- -- William Colburn, "Sysprog" <wcolburn(a)nmt.edu> Computer Center, New Mexico Institute of Mining and Technology http://www.nmt.edu/tcc/ http://www.nmt.edu/~wcolburn

1 0

problem in destination string
by Askhat Gabdulov 23 Sep '01

23 Sep '01

Hi i try to post log messages to another server for this i add in config file : destination d_mesg { tcp(ip(xxx.xxx.x.xx) port(6969); max-connections(10)); }; but when i run syslog-ng daemon i get parse error at line that wrote i try : destination d_mesg { tcp(ip(xxx.xxx.x.xx) port(6969); }; and i get match error what is wrong?

2 2

RE: [syslog-ng]compile fail on FreeBSD 4.4-RC
by Hedberg, Eric 21 Sep '01

21 Sep '01

Ran into the same issue with 1.5.8 as well. Essentially: In nscache.h insert above the other includes: #include <sys/types.h> #include <sys/socket.h> and in nscache.c, comment out: #include <netdb.h> #include <netinet/in.h> And it should build. > -----Original Message----- > From: Ilya [mailto:mail@krel.org] > Sent: Thursday, September 20, 2001 10:04 PM > To: syslog-ng(a)lists.balabit.hu > Subject: Re: [syslog-ng]compile fail on FreeBSD 4.4-RC > > > stavke was not available at the time. and surely 4.4 RC is > more stable than > current > anyways, it gives same result on Stable now. seems to me its > ipv6 related > is there way to turn off ipv6 support during syslog-ng compilation? > > > ----- Original Message ----- > From: "Brad Arlt" <arlt(a)cpsc.ucalgary.ca> > To: <syslog-ng(a)lists.balabit.hu> > Sent: Thursday, September 20, 2001 3:16 PM > Subject: Re: [syslog-ng]compile fail on FreeBSD 4.4-RC > > > > On Thu, Sep 20, 2001 at 12:04:56AM -0400, Ilya wrote: > > > any ideas? > > > > Since RC means release cantidate (I think/hope), my vote is the same > > as the compilers > > > > nscache.c:247: This may be due to a compiler bug or to > impossible asm > > nscache.c:247: statements or clauses. > > > > There really shouldn't be *any* syntax errors in system > files, unless > > they are included after syslog-ng or libol header files (which could > > propigate errors in them to the system files via the magic of parse > > errors). This smacks of compiler/cpp/header file problems to me. > > > > Either try a known good version of syslog-ng (1.4.x?) or try FreeBSD > > 4.4-STABLE or FreeBSD-Current. > > > > > > gcc -DHAVE_CONFIG_H -I. -I/usr/tmp/syslog-ng-1.5.10/src -I. > -g -O2 -Wall > > > -I/usr/local/include/libol -D_GNU_SOURCE -c nscache.c > > > In file included from nscache.c:55: > > > /usr/include/netinet/in.h:233: syntax error before `in_addr_t' > > > /usr/include/netinet/in.h:285: syntax error before `u_char' > > > In file included from /usr/include/netinet/in.h:475, > > > from nscache.c:55: > > > /usr/include/netinet6/in6.h:122: syntax error before `u_int8_t' > > > /usr/include/netinet6/in6.h:144: syntax error before `u_int8_t' > > > /usr/include/netinet6/in6.h:149: syntax error before `u_int32_t' > > > /usr/include/netinet6/in6.h:610: syntax error before `*' > > > /usr/include/netinet6/in6.h:612: syntax error before `*' > > > /usr/include/netinet6/in6.h:612: warning: data definition > has no type or > > > storage class > > > /usr/include/netinet6/in6.h:613: syntax error before `u_int8_t' > > > /usr/include/netinet6/in6.h:614: syntax error before `u_int8_t' > > > /usr/include/netinet6/in6.h:629: syntax error before `u_int8_t' > > > /usr/include/netinet6/in6.h:634: syntax error before `u_int8_t' > > > /usr/include/netinet6/in6.h:636: syntax error before `u_int8_t' > > > nscache.c: In function `nscache_new': > > > nscache.c:112: structure has no member named `s_addr' > > > nscache.c: In function `nscache_lookup': > > > nscache.c:178: structure has no member named `s_addr' > > > nscache.c:183: structure has no member named `s_addr' > > > nscache.c:183: structure has no member named `s_addr' > > > nscache.c:245: structure has no member named `s_addr' > > > nscache.c:245: structure has no member named `s_addr' > > > nscache.c:247: fixed or forbidden register 0 (ax) was > spilled for class > > > AREG. > > > nscache.c:247: This may be due to a compiler bug or to > impossible asm > > > nscache.c:247: statements or clauses. > > > nscache.c:247: This is the instruction: > > > (insn 56 55 58 (parallel[ > > > (set (reg:SI 2 %ecx) > > > (udiv:SI (reg/v:SI 2 %ecx) > > > (reg:SI 1 %edx))) > > > (set (reg:SI 1 %edx) > > > (umod:SI (reg/v:SI 2 %ecx) > > > (reg:SI 1 %edx))) > > > ] ) 243 {udivmodsi4} (insn_list 49 (insn_list 55 (nil))) > > > (expr_list:REG_DEAD (reg/v:SI 2 %ecx) > > > (expr_list:REG_DEAD (reg:SI 1 %edx) > > > (expr_list:REG_UNUSED (reg:SI 2 %ecx) > > > (nil))))) > > > *** Error code 1 > > > > > > Stop in /usr/tmp/syslog-ng-1.5.10/src. > > > > > > > > > _______________________________________________ > > > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > > > https://lists.balabit.hu/mailman/listinfo/syslog-ng > > > -------------------------------------------------------------- > ------------ > -- > > __o Bradley Arlt Email: arlt(a)cpsc.ucalgary.ca o__ > > _ \<_ WWW: www.acs.ucalgary.ca/~bdarlt _>/ _ > > (_)/(_) -Eat well, sleep peacefully, drink lots, and ride > like hell. > (_)\(_) > > > > _______________________________________________ > > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > > https://lists.balabit.hu/mailman/listinfo/syslog-ng > > > > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng >

1 0

syslog-ng-1.4.12 and libol-0.2.23 - Solaris7 and gcc-2.95.3
by Christian Korschan 21 Sep '01

21 Sep '01

Dear all, I just tried to build syslog-ng-1.4.12 under Solaris 7 with gcc-2.95.3 (after libol-0.2.23 was installed) and the build fails with: . . gcc -DHAVE_CONFIG_H -I. -I/ctbto/idc/cisd/source/build/IDC/work/syslog-ng-1.4.12/src -I. -I/opt/IDC/include -O2 -Wall -I/opt/IDC/include/libol -D_GNU_SOURCE -c afuser.c gcc -DHAVE_CONFIG_H -I. -I/ctbto/idc/cisd/source/build/IDC/work/syslog-ng-1.4.12/src -I. -I/opt/IDC/include -O2 -Wall -I/opt/IDC/include/libol -D_GNU_SOURCE -c afstreams.c afstreams.c: In function `io_stream_get': afstreams.c:167: too few arguments to function `init_file' make[3]: *** [afstreams.o] Error 1 make[3]: Leaving directory `/ctbto/idc/cisd/source/build/IDC/work/syslog-ng-1.4.12/src' syslog-1.4.11 with libol-0.2.21 built fine under S7/SPARC and Intel and S8/SPARC. any glue ? Thanks in advance -- Christian Korschan Systems Specialist CTBTO/IDC Vienna International Centre Email: Christian.Korschan(a)CTBTO.ORG P.O. BOX 1200 Phone: +43(1)26030 6184 A-1400 Vienna, Austria FAX: +43(1)26030 5932

1 0

how to get FQDN?
by Rimdenok, Sviatoslav 21 Sep '01

21 Sep '01

Dear All, I've installed syslog-ng version 1.4.13, - it is really nice tool !! There is syslog-ng installed on each unix system. At the same time all logs are sent to the central server (where syslog-ng is installed also). At the cental server I'm triying to spread logs in the different directories by using macros like $HOST, $YEAR and so on. When I'm using $HOST directories I didn't manage to get the full domain name, - only short of it. For example, the full domain name is "server.domain.com".. but $HOST = "server".. Could you please give me a small hint what I should to change (in the system configuration, in the syslog-ng config-file)? I've tried to find the answer in the maillist archive but didn't succeed. Thank you very much! here is options section of syslog-ng.conf file (I'm using the same options on all servers): ------------------------------------------------------------ options { sync (0); time_reopen (5); log_fifo_size (1000); long_hostnames (on); use_dns (yes); use_fqdn (yes); create_dirs (yes); keep_hostname (yes); use_time_recvd(yes); }; ------------------------------------------------------------ Thanks again for your help and great tool ! regards, Slava > Sviatoslav Rimdenok > System Administrator > > COLT Telecom AG > Badenerstrasse 820 > CH-8048 Zuerich > > t (+41) +1 5 600 900 > f (+41) +1 5 600 910 > e sviatoslav.rimdenok(a)colt.ch > www.colt.ch > > we make business straight.forward >

1 0

Difficulty with source(net) on Solaris 8 [syslog-ng-1.5.9]
by Ken Paris 21 Sep '01

21 Sep '01

Greetings, I need assistance to configure syslog-ng to log external SYSLOG messages. I have successfully compiled the development branch version 1.5.9 as well as libol-0.2.24 on my Solaris8 box. I am running into the same problem with logging external syslog messages as I did with version 1.4.9a. kparis@dv-netlog$ ps -aef | grep sysl root 203 1 0 Sep 14 ? 0:00 /usr/sbin/syslogd root 10614 1 0 12:23:51 ? 0:00 /usr/local/sbin/syslog-ng - f /usr/local/etc/syslog-ng.conf -p /var/run/syslog-ng.pid I can snoop the interface and see the SYSLOG packets arrive: kparis@dv-netlog$ sudo snoop 172.16.3.254 Using device /dev/hme (promiscuous mode) 172.16.3.254 -> dv-netlog SYSLOG C port=57636 <5>371: Sep 17 13:23 I can see the messages appear into the standard syslogd destination /var/adm/messages: kparis@dv-netlog$ sudo tail -f /var/adm/messages Sep 17 13:27:39 [172.16.3.254.225.36] 371: Sep 17 13:23:54: %SYS-5-CONFIG_I: Configured from console by kparis on vty0 (172.16.0.60) Only local messages (such as sudo) appear in /var/log/default. kparis@dv-netlog$ sudo tail -f /var/log/default Sep 17 13:17:06 dv-netlog sudo: [ID 850335 local2.notice] kparis : TTY=pts/4 ; PWD=/uhome/kparis ; USER=root ; COMMAND=/usr/sbin/snoop 172.16.3.254 Sep 17 13:27:28 dv-netlog sudo: [ID 850335 local2.notice] kparis : TTY=pts/3 ; PWD=/usr/local/install ; USER=root ; COMMAND=/usr/bin/cat /var/run/syslog-ng.pid No external soruced messages appear into this same log as would be expected. My syslog-ng configuration file is as follows: kparis@dv-netlog$ more /usr/local/etc/syslog-ng.conf options { sync(0); keep_hostname(yes); chain_hostnames(no); log_fifo_size (30000); }; source s_local { sun-streams("/dev/log" door("/etc/.syslog_door")); }; source s_int { internal(); }; source s_net_udp { udp(); }; destination d_local { file("/var/log/default"); }; destination d_int { file("/var/log/internal"); }; log { source(s_local); source(s_net_udp); destination(d_local); }; log { source(s_int); destination(d_int); }; I am seeing a difference with truss on the syslog-ng process in that I no longer see the recvfrom() entries. kparis@dv-netlog$ sudo truss -p `sudo cat /var/run/syslog-ng.pid` poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) poll(0xFFBEF5E8, 4, 60000) = 0 time() = 1000758508 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) = 0 poll(0xFFBEF5E8, 4, 60000) = 1 getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4) = 0 time() = 1000758520 time() = 1000758520 time() = 1000758520 time() = 1000758520 poll(0xFFBEF5E8, 4, 100) = 1 write(0, " S e p 1 7 1 3 : 2 8".., 151) = 151 time() = 1000758520 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) Err#62 ETIME time() = 1000758531 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) = 0 poll(0xFFBEF5E8, 4, 60000) = 1 getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4) = 0 time() = 1000758539 time() = 1000758539 time() = 1000758539 time() = 1000758539 poll(0xFFBEF5E8, 4, 100) = 1 write(0, " S e p 1 7 1 3 : 2 8".., 139) = 139 time() = 1000758539 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) = 0 poll(0xFFBEF5E8, 4, 60000) = 1 getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4) = 0 time() = 1000758548 time() = 1000758548 time() = 1000758548 time() = 1000758548 poll(0xFFBEF5E8, 4, 100) = 1 write(0, " S e p 1 7 1 3 : 2 9".., 150) = 150 time() = 1000758548 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) poll(0xFFBEF5E8, 4, 60000) = 0 time() = 1000758609 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) = 0 poll(0xFFBEF5E8, 4, 60000) = 1 getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4) = 0 time() = 1000758668 time() = 1000758668 time() = 1000758668 time() = 1000758668 poll(0xFFBEF5E8, 4, 100) = 1 write(0, " S e p 1 7 1 3 : 3 1".., 147) = 147 time() = 1000758668 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) = 0 poll(0xFFBEF5E8, 4, 60000) = 1 getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4) = 0 time() = 1000758683 time() = 1000758683 time() = 1000758683 time() = 1000758683 poll(0xFFBEF5E8, 4, 100) = 1 write(0, " S e p 1 7 1 3 : 3 1".., 151) = 151 time() = 1000758683 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) poll(0xFFBEF5E8, 4, 60000) = 0 time() = 1000758743 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) poll(0xFFBEF5E8, 4, 60000) = 0 time() = 1000758803 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) Err#62 ETIME time() = 1000758831 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) poll(0xFFBEF5E8, 4, 60000) = 0 time() = 1000758863 poll(0xFFBEF5E8, 4, 100) = 0 poll(0xFFBEF5E8, 4, 60000) (sleeping...) signotifywait() (sleeping...) lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...) door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)

6 7

Documentation
by Mariusz 20 Sep '01

20 Sep '01

Is anybody going to write a full documentation to this software - maybe it is nice and configurable but main its disadvantage is that there is no full documentation. Regards Mariusz -- r e k l a m a Lista Plac [ http://listaplac.onet.pl ]

1 0

newbie problem
by Henry Dziewa 18 Sep '01

18 Sep '01

Hi there, I just compiled and installed syslog-ng-1.5.9. Everything seems to be working ok but I'm not able to receive any traps from my cisco devices. I tried multiple devices and nothing seems to be getting to the syslog server. I know that they work fine with regular syslog on o0ther machines. I'm using Solaris 2.6. Here is a config file I found on this list and tried to use: options { time_reopen ( 0 ); sync ( 0 ); chain_hostnames ( no ); use_dns ( yes ); use_fqdn ( yes ); }; ########################################### # Global Source statments for the program ########################################### source src { sun-streams ( "/dev/log" door( "/etc/.syslog_door" )); internal ( ); # tcp ( max-connections( 1000 ) ); udp ( ); }; destination d_all_ms { file("/logs/machine_specific/$HOST/all.$YEAR$MONTH$DAY" group(systems) perm(0664) dir_perm(0664) create_dirs(yes) );}; destination d_cisco { file("/logs/cisco/cisco.messages" );}; # CISCO (local7) messages: filter f_cisco { facility(local7); }; # NO CISCO (local7) messages: filter f_no_cisco { not facility(local7); }; #Forward all messages to machine specific log monitored by system admins log { source(src); filter(f_no_cisco); destination(d_all_ms); }; # Log all messages coming in on local7 facility to /logs/cisco/cisco.messages log { source(src); filter(f_cisco); destination(d_cisco); }; The only messages I'm getting is from d_all_ms for the local machine: Sep 18 12:22:44 sys-backup syslog-ng[10513]: STATS: dropped 0 Sep 18 12:22:45 sys-backup syslog-ng[10513]: STATS: dropped 0 Sep 18 12:22:46 sys-backup syslog-ng[10513]: STATS: dropped 0 Sep 18 12:22:47 sys-backup syslog-ng[10513]: STATS: dropped 0 Any help would be very appreciated !

1 0

Random crashes with version 1.5.10 under Linux.
by Stephane Enten 18 Sep '01

18 Sep '01

I'm experiencing weird crashes with the mentioned version of syslog-ng running on Linux. Syslog-ng starts fine and without any warning/error, but within minutes it crashes with signal 11 (segfault) or 6 (aborted). Running syslog-ng with -d shows this error before crash: ol_object_check: Type error! I've been running it in debug and with strace logs for days no but haven't found anything obvious. Does anyone already got this behaviour ? Regards, Stephane

2 2